Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
File:                     3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (raw, json)
Hash identifier:          zfEP/Pp+voTq+tnwh6zrXyttg/V3CtiXWPgzCewZNzw=
Subject key identifier:   A5:B5:84:8C:81:D1:6B:70:7C:C5:08:54:AE:1E:06:40:07:59:7E:8F
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       03D7B0EC7A9800B1C56A72BBA43A97DECB0C8842
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
Signing time:             Mon 02 Jun 2025 02:02:43 +0000
ROA not before:           Mon 02 Jun 2025 01:57:43 +0000
ROA not after:            Mon 01 Jun 2026 02:02:43 +0000
asID:                     138887
IP address blocks:        103.141.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d7:b0:ec:7a:98:00:b1:c5:6a:72:bb:a4:3a:97:de:cb:0c:88:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Jun  2 01:57:43 2025 GMT
            Not After : Jun  1 02:02:43 2026 GMT
        Subject: CN=A5B5848C81D16B707CC50854AE1E064007597E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:1a:a5:c6:0d:33:85:d2:b2:91:fb:9c:86:
                    0f:c4:1d:43:a5:04:27:34:4a:1a:e6:e1:82:88:bd:
                    e7:46:dd:c9:9f:bb:83:ce:53:d2:7c:92:89:dc:72:
                    27:68:07:0a:fc:50:76:9d:cc:15:48:02:d4:e9:93:
                    e9:90:0f:4c:bc:1c:e4:54:4a:cb:51:4d:22:61:50:
                    e4:93:26:cf:09:79:89:8e:68:43:73:9e:07:64:ba:
                    a2:83:dc:c5:21:b5:e7:8a:da:04:5c:bd:e0:07:19:
                    c0:bb:07:b1:c5:bd:5a:21:f3:d7:59:d3:72:35:aa:
                    0c:38:48:ca:e6:a1:af:22:a2:9f:b5:c2:55:5e:35:
                    a1:09:05:2b:0a:5e:84:62:f0:32:fe:de:31:5d:db:
                    17:91:df:6c:01:75:02:61:68:84:3e:cf:63:2d:78:
                    f2:9e:51:37:f9:31:28:4d:a7:ed:93:95:02:c0:ad:
                    76:df:30:ca:b6:a3:43:bd:e3:0e:11:4e:7d:18:c2:
                    65:75:e1:48:e0:a3:97:18:8d:a3:60:1f:7d:36:a5:
                    6b:90:28:8a:5c:e5:e3:c7:d0:8b:e7:bf:da:dd:ef:
                    a0:b5:5d:d7:ae:ea:5f:c2:81:8a:07:14:4c:c8:1a:
                    6d:e3:f8:08:41:14:3e:a9:a3:bc:0d:ec:68:8a:b9:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B5:84:8C:81:D1:6B:70:7C:C5:08:54:AE:1E:06:40:07:59:7E:8F
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:02:5f:1c:78:4b:5c:cb:d2:8e:13:4d:8e:fa:9b:69:c0:
         da:be:f0:b0:fc:54:43:16:49:2a:d1:92:90:62:a3:3b:03:bd:
         41:01:1f:8b:e1:85:44:28:21:5c:be:72:2a:53:ee:d1:6c:64:
         52:58:56:05:7e:82:ee:ed:b3:0c:15:b5:16:46:ff:ab:fb:ce:
         c3:10:1d:99:43:c6:21:72:96:74:ee:4d:12:a4:a0:11:ee:26:
         34:b5:2a:d8:16:34:41:09:7f:2a:2c:f0:df:4e:05:dc:46:8c:
         ec:a2:a2:53:c2:b3:b1:96:f4:ad:f1:7d:13:a2:10:3e:9c:80:
         7a:b5:30:a9:78:75:82:d2:b3:49:8a:3e:d5:b3:9b:a7:31:78:
         6d:3a:4e:aa:e9:43:94:40:63:8a:65:57:6c:fd:7d:1a:d0:6b:
         74:60:d6:21:22:e3:a5:14:ae:7b:3e:f8:55:df:cc:a6:86:d4:
         01:19:05:98:f5:24:ec:83:59:26:e1:ea:8e:59:d9:29:b1:0d:
         39:28:e2:92:ac:e2:b4:f8:46:bc:de:b7:b4:bb:f2:ca:e3:9f:
         87:98:0e:b9:83:d5:6d:7b:d2:f9:77:45:ad:11:55:f6:7d:a2:
         5a:dd:49:80:fc:de:0f:5a:88:35:4f:6b:dd:82:f6:89:66:4e:
         ed:cb:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:39 2025 by rpki-client